January 28, 2025 - Reading time: 2 minutes

According to ChatGPT :

Yes. Windows devices that are joined to an Active Directory (AD) domain are generally considered managed devices. This is because joining a device to an AD domain enables IT administrators to manage the device centrally through policies, configurations, and updates.

Here’s why they are considered managed:

1. Group Policy Management:

   • Administrators can enforce security settings, deploy software, and configure user environments using Group Policy Objects (GPOs).

2. Authentication and Authorization:

   • Domain-joined devices use centralized authentication (via Kerberos) for access to network resources, ensuring only authorized users and devices can access them.

3. Software Deployment:

   • IT can deploy software and updates across all domain-joined devices using tools like Microsoft System Center Configuration Manager (SCCM) or third-party solutions.

4. Security Controls:

   • Administrators can enforce password policies, configure firewall rules, and apply other security settings uniformly across devices.

5. Monitoring and Compliance:

   • Domain-joined devices can be monitored for compliance with organizational policies.

6. Access to Centralized Resources:

   • Domain joining allows seamless access to shared drives, printers, and other network resources that are controlled by AD.

However, it is worth noting that being "managed" through AD alone may not include modern management capabilities offered by solutions like Microsoft Intune or other Mobile Device Management (MDM) platforms. To enable hybrid or more advanced management scenarios, organizations often combine AD domain-joined setups with Azure AD integration or co-management via Intune.

NOTE

There is conflicting information online as to if this information is correct or not. So as with all things on the internet, take it with a grain of salt......